d6625fd699c6479a664f201b4adae2be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6625fd699c6479a664f201b4adae2be_JaffaCakes118
Size

2.6MB
MD5

d6625fd699c6479a664f201b4adae2be
SHA1

05ca10fe83fdc939044354fdc414cfdda4f15783
SHA256

ba7ca0d0b8a18da023976ee7dfae4336a5e3a58e90cfd4329f60c149ec520c9f
SHA512

20fbe877d27bf679195ccb95f60b1bcb465149e706068de3d1cf16c30dfc89587e29ff75901db4035b4765f69cf80d3b6587df45bb94e5a52d6571234374d81c
SSDEEP

49152:xHJA05nTwb5L1T3Hg0UDmQOWUGDVCqVW1PRLqCODbTuj8YA6QgGixc:xHm0V41bA0UDmoU6VCAWJR1WbTu4YA63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6625fd699c6479a664f201b4adae2be_JaffaCakes118

Files

d6625fd699c6479a664f201b4adae2be_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 433KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shr
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ